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Claims: 

1. (Canceled) 

2. (Previously presented) The method of claim 41, wherein the matching 
criteria identifies a particular network address in the range of network 
addresses and an action that is performed with respect to the particular 
network address. 

3. (Canceled) 

4. (Previously presented) The method of claim 41, further comprising 
modifying the instructions to change the range of addresses. 

5. (Previously Presented) The method of claim 4, wherein modifying the 
instructions comprises increasing the range of addresses. 

6. (Previously presented) The method of claim 41, further comprising 
installing a negative filter in order to block a network device having an address 
within the range of addresses from accessing the resource. 

7. (Previously presented) The method of claim 41, wherein the instructions 
are installed in a target device on the network, and the resource comprises 
bandwidth available from the target device. 

8. (Previously presented) The method of claim 7, further comprising 
modifying the instructions to change an amount of bandwidth available on the 
target device. 

9. (Previously presented) The method of claim 41, wherein the filter defines 
a level of access to the resource based on a priority level of data packets being 
transmitted through the network. 
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10. (Previously presented) The method of claim 9, further comprising 
modifying the instructions to change an amount of data packets having a 
particular priority level that can be transmitted through the network. 

1 1 . (Original) The method of claim 9, wherein the priority level of the data 
packets is defined by instructions in headers of the data packets. 

12. (Previously presented) The method of claim 2, wherein there are a 
limited number of filters that can be installed on a target device on the 
network. 

13. (Previously presented) The method of claim 12, further comprising 
installing a negative filter on the target device in order to block data from an 
address that is transmitting data. 

14. (Canceled) 

15. (Previously presented) The computer program of claim 42, wherein the 
matching criteria identifies a particular network address in the range of 
network addresses and an action that is performed with respect to the 
particular network address. 

16. (Canceled) 

17. (Previously presented) The computer program of claim 42, further 
comprising executable code to modify the instructions to change the range of 
network addresses. 

18. (Previously presented) The computer program of claim 17, wherein 
modifying the instructions comprises increasing the range of network 
addresses. 
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19. (Previously presented) The computer program of claim 42, further 
comprising executable code to install a negative filter in order to block a 
network device having an address within the range of network addresses from 
accessing the resource. 

20. (Previously presented) The computer program of claim 42, wherein the 
instructions are installed in a target device on the network, and the resource 
comprises bandwidth available from the target device. 

21. (Previously presented) The computer program of claim 20, further 
comprising executable code to modify the instructions to change an amount of 
bandwidth available on the target device. 

22. (Previously presented) The computer program of claim 42, wherein the 
filter defines a level of access to the resource based on a priority level of data 
packets being transmitted through the network. 

23. (Previously presented) The computer program of claim 22, further 
comprising executable code to modify the instructions to change an amount of 
data packets having a particular priority level that can be transmitted through 
the network. 

24. (Original) The computer program of claim 22, wherein the priority level 
of the data packets is defined by instructions in headers of the data packets. 

25. (Previously presented) The computer program of claim 15, wherein there 
are a limited number of filters that can be installed on a target device on the 
network. 
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26. (Previously presented) The computer program of claim 15, further 
comprising executable code to install a negative filter on the target device in 
order to block data from an address that is transmitting data. 

27. (Canceled) 

28. (Previously presented) The apparatus of claim 43, wherein the matching 
criteria identifies a particular network address in the range of network 
addresses and an action that is performed with respect to the particular 
network address. 

29. (Canceled) 

30. (Previously presented) The apparatus of claim 43, wherein the processor 
executes the code to modify the instructions to change the range of addresses 

31. (Previously presented) The apparatus of claim 30, wherein modifying the 
instructions comprises increasing the range of addresses. 

32. (Previously presented) The apparatus of claim 31, wherein the processor 
executes the code to install a negative filter in order to block a network device 
having an address within the range of addresses from accessing the resource. 

33. (Previously presented) The apparatus of claim 43, wherein the 
instructions are installed in a target device on a network, and the resource 
comprises bandwidth available from the target device. 

34. (Previously presented) The apparatus of claim 33, wherein the processor 
executes code to change an amount of bandwidth available on the target 
device. 
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35. (Previously presented) The apparatus of claim 43, wherein the filter 
defines a level of access to the resource based on a priority level data packets 
being transmitted through the network. 

36. (Previously presented) The apparatus of claim 35, wherein the processor 
executes code to modify the instructions to change an amount of data packets 
having a particular priority level that can be transmitted through the network. 

37. (Original) The apparatus of claim 35, wherein the priority level of the 
data packets is defined by instructions in headers of the data packets. 

38. (Previously presented) The apparatus of claim 28, wherein there are a 
limited number of filters that can be installed on the network. 

39. (Previously presented) The apparatus of claim 38, wherein the processor 
executes code to install a negative filter on the device in order to block data 
from an address that is transmitting data. 

40. (Canceled) 

4 1 . (currently amended) A method of aggregating filters on a network 
device for providing access to a resource on a network, comprising: 

installing instructions on the network for implementing a filter 
having matching criteria tha t specify a network address, the filter 
limiting access to the resource to a first network device based on 
associated with a network address associated with the first network 
device that matches the network address specified by the matching 



criteria ; 
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determining that a second network device requests access to the 
resource; 

identifying a range of network addresses based on the network 
addresses associated with the first and second network devices; and 

in automated response to determining that the second network 
device requests access to the resource, modifying the matching criteria of 
the filter to specify the range of network addresses, such that the filter 
grants granting access to the resource to any network device associated 
with a network address within the identified range of network addresses 
specified by the matching criteria . 

42. (currently amended) A computer program stored on a 

computer-readable medium aggregating filters on a network device for 
providing access to a resource on a network, the computer program 
comprising executable code that causes a computer to: 

install instructions on the network for implementing a filter 

having matching criteria that specify a network address, the filter 

limiting access to the resource to a first network device based on 

associated with a network address associated with the first 

network device that matches the network address specified by the 

matching criteria ; 

determine that a second network device requests access to 

the resource; 
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identify a range of network addresses based on the network 
addresses associated with the first and second network devices; 
and 

in automated response to determining that the second 
network device requests access to the resource, modify the 
matching criteria of the filter to specify the range of network 
addresses, such that the filter grants granting access to the 
resource to any network device associated with a network address 
within the identified range of network addresses specified by the 
matching criteria . 

43. (currently amended) An apparatus for aggregating filters on a 

network device for providing access to resource on a network, 
comprising: 

a memory which stores executable code; and 
a processor which executes the code to: 

install instructions on the network for implementing a 
filter having matching criteria that that specify a network 
address, the filter limit ing access to the resource to a first 
network device based on associated with a network address 
associated with the first network device that matches the 
network address specified by the matching criteria ; 

determine that a second network device requests 
access to the resource; 
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identify a range of network addresses based on the 
network addresses associated with the first and second 
network devices; and 

in automated response to determining that the second 
network device requests access to the resource, modify the 
matching criteria of the filter to specify the range of network 
addresses, such that the filter grants granting access to the 
resource to any network device associated with having a 
network address within the identified range of network 
addresses specified by the matching criteria . 

44. (currently amended) An apparatus for aggregating filters on a 
network device for providing access to a resource on a network, 
comprising: 

means for installing instructions on the network for implementing 
a filter having matching criteria that specify a network address, the filter 
limiting access to the resource to a first network device based on 
associated with a network address associated with the first network 
4ev4ee that matches the network address specified by the matching 
criteria ; 

means for determining that a second network device requests 
access to the resource; 

means for identifying a range of network addresses based on the 
network addresses associated with the first and second network devices; 
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means for modifying the matching criteria of the filter to specify the 
range of network addresses in automated response to determining that 
the second network device requests access to the resource, such that the 
filter grants granting access to the resource to any network device 
associated with a network address within the identified range of network 
addresses specified by the matching criteria . 



